/ 
XML-LibXML-1.69
Security Advisories (3)
CVE-2015-3451 (2015-04-23)

The _clone function does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVE-2017-10672 (2015-04-23)

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

CVE-2026-8177 (2026-05-10)

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory. Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.

Changes for version 1.69

  • fix incorrect output of getAttributeNS and possibly other methods on UTF-8
  • added $node_or_xpc->exists($xpath) method
  • remove accidental debug output from XML::LibXML::SAX::Builder

Documentation

XML::LibXML::Attr
XML::LibXML Attribute Class
XML::LibXML::CDATASection
XML::LibXML Class for CDATA Sections
XML::LibXML::Comment
XML::LibXML Comment Class
XML::LibXML::DOM
XML::LibXML DOM Implementation
XML::LibXML::Document
XML::LibXML DOM Document Class
XML::LibXML::DocumentFragment
XML::LibXML's DOM L2 Document Fragment Implementation
XML::LibXML::Dtd
XML::LibXML DTD Handling
XML::LibXML::Element
XML::LibXML Class for Element Nodes
XML::LibXML::InputCallback
XML::LibXML Class for Input Callbacks
XML::LibXML::Namespace
XML::LibXML Namespace Implementation
XML::LibXML::Node
Abstract Base Class of XML::LibXML Nodes
XML::LibXML::PI
XML::LibXML Processing Instructions
XML::LibXML::Parser
Parsing XML Data with XML::LibXML
XML::LibXML::Pattern
XML::LibXML::Pattern - interface to libxml2 XPath patterns
XML::LibXML::RelaxNG
RelaxNG Schema Validation
XML::LibXML::Schema
XML Schema Validation
XML::LibXML::Text
XML::LibXML Class for Text Nodes
XML::LibXML::XPathExpression
XML::LibXML::XPathExpression - interface to libxml2 pre-compiled XPath expressions

Modules

XML::LibXML
Perl Binding for libxml2
XML::LibXML::Boolean
Boolean true/false values
XML::LibXML::ErrNo
Structured Errors This module is based on xmlerror.h libxml2 C header file. It defines symbolic constants for all libxml2 error codes. Currently libxml2 uses over 480 different error codes. See also XML::LibXML::Error.
XML::LibXML::Error
Structured Errors
XML::LibXML::Literal
Simple string values.
XML::LibXML::NodeList
a list of XML document nodes
XML::LibXML::Number
Simple numeric values.
XML::LibXML::Reader
XML::LibXML::Reader - interface to libxml2 pull parser
XML::LibXML::SAX
XML::LibXML direct SAX parser
XML::LibXML::SAX::Builder
Building DOM trees from SAX events.
XML::LibXML::SAX::Generator
Generate SAX events from a LibXML tree
XML::LibXML::XPathContext
XPath Evaluation

Provides

XML::LibXML::Attr
in LibXML.pm
XML::LibXML::CDATASection
in LibXML.pm
XML::LibXML::Comment
in LibXML.pm
XML::LibXML::Document
in LibXML.pm
XML::LibXML::DocumentFragment
in LibXML.pm
XML::LibXML::Dtd
in LibXML.pm
XML::LibXML::Element
in LibXML.pm
XML::LibXML::InputCallback
in LibXML.pm
XML::LibXML::NamedNodeMap
in LibXML.pm
XML::LibXML::Namespace
in LibXML.pm
XML::LibXML::Node
in LibXML.pm
XML::LibXML::PI
in LibXML.pm
XML::LibXML::Pattern
in LibXML.pm
XML::LibXML::RelaxNG
in LibXML.pm
XML::LibXML::SAX::AttributeNode
in lib/XML/LibXML/SAX/Generator.pm
XML::LibXML::SAX::Parser
in lib/XML/LibXML/SAX/Parser.pm
XML::LibXML::Schema
in LibXML.pm
XML::LibXML::Text
in LibXML.pm
XML::LibXML::XPathExpression
in LibXML.pm
XML::LibXML::_SAXParser
in LibXML.pm

Examples

Other files